Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
File:                     3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier:          YgWDO7bmheUToc8ihmevA/YajjzS29F24UHn4Xpm8eo=
Subject key identifier:   81:AA:81:2E:95:19:44:B6:A6:54:67:55:B5:78:93:7F:75:14:C8:AD
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       63179CD1B403DE8DEB48AA7BBC11EB8F4A27BE62
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:20 +0000
ROA not before:           Mon 02 Jun 2025 00:58:20 +0000
ROA not after:            Mon 01 Jun 2026 01:03:20 +0000
asID:                     4800
IP address blocks:        123.231.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:17:9c:d1:b4:03:de:8d:eb:48:aa:7b:bc:11:eb:8f:4a:27:be:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:20 2025 GMT
            Not After : Jun  1 01:03:20 2026 GMT
        Subject: CN=81AA812E951944B6A6546755B578937F7514C8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:f6:61:1f:b2:ba:82:5f:b3:55:1b:06:31:
                    67:db:83:fa:22:c3:24:e9:46:42:dd:80:4d:37:f0:
                    b2:36:86:7a:37:f2:eb:80:9a:e1:e7:56:93:ec:e1:
                    d7:4c:b8:b9:8d:f1:79:cf:3f:6c:ed:84:4d:25:01:
                    e5:f7:a3:90:1b:14:e6:05:95:52:65:30:5d:8c:db:
                    5f:db:62:9e:e7:8f:c7:c9:c9:3b:c4:f7:ed:3c:15:
                    c0:f6:54:04:e5:60:b1:14:ea:52:6a:a3:3a:f8:24:
                    12:0b:2a:0b:bd:c7:76:5f:eb:15:c1:89:97:13:f6:
                    83:1f:61:af:f2:b7:c1:bc:50:8f:1b:0e:51:d3:19:
                    46:47:fd:5e:c0:b6:f2:1c:db:03:2e:1a:2a:e7:e3:
                    56:a9:fc:14:62:cf:b0:5a:fd:8e:77:bb:f2:91:c6:
                    c7:c8:cd:ed:a4:80:8a:06:96:0f:f8:8c:e9:83:d0:
                    65:ee:a6:ab:e8:1e:0d:21:a3:7e:fd:62:d8:9a:20:
                    de:bd:f0:93:44:0b:8c:d2:74:28:c9:38:2a:e5:2b:
                    75:00:90:11:b3:88:9a:5b:b5:e7:a9:e9:71:55:df:
                    0e:37:a5:a7:e8:74:5b:ef:79:e1:17:f6:e1:a2:7b:
                    5a:43:b1:28:9c:7c:c0:22:0d:0e:b3:c9:2c:a9:6e:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AA:81:2E:95:19:44:B6:A6:54:67:55:B5:78:93:7F:75:14:C8:AD
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:fc:a2:2e:eb:42:48:ff:4d:37:ab:a8:41:f5:8e:f2:49:9d:
         9b:16:b7:76:cb:08:be:1f:49:53:50:d0:d0:92:0c:f3:c9:2e:
         32:3c:44:e9:f2:56:65:1b:76:bd:52:25:ae:7e:2a:f7:e8:03:
         e3:de:28:75:31:33:14:65:25:ac:7a:82:bb:e2:49:2e:e6:94:
         22:b9:6c:39:dd:c8:58:4c:ef:f8:2c:f9:cd:7a:0a:06:6b:84:
         98:0f:6b:d2:f8:65:aa:bb:99:78:cf:fb:65:88:36:3f:6a:70:
         4d:c9:01:46:b3:8b:c2:9a:40:08:f7:3b:10:ba:eb:95:f6:d6:
         3b:0d:c7:91:54:01:51:5e:c7:05:5f:37:7e:7d:f0:23:4e:89:
         6b:96:db:9b:8b:a5:83:6a:04:79:19:a0:a8:06:99:43:51:13:
         84:da:d9:b2:db:51:69:e4:af:60:7e:00:42:0b:05:b0:fb:26:
         19:0d:cc:a2:03:06:30:40:fb:13:8d:69:0a:41:90:2a:fd:95:
         ee:c5:10:9a:e9:4f:f7:a4:a2:45:29:c8:31:5f:23:70:57:0d:
         dd:65:8a:86:02:ed:32:f7:fb:fc:b9:03:01:da:95:50:20:c0:
         89:e5:69:0f:18:cb:3f:4c:d3:9e:57:93:a0:cd:4a:66:ae:20:
         c4:66:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:29 2025 by rpki-client